Bug ID | 1128988 |
---|---|
Summary | buggy AppArmor profiles in M17N:l10n.opensuse.org/l10n_opensuse_org-installer |
Classification | openSUSE |
Product | openSUSE Distribution |
Version | Leap 15.0 |
Hardware | Other |
OS | Other |
Status | NEW |
Severity | Normal |
Priority | P5 - None |
Component | AppArmor |
Assignee | sbrabec@suse.com |
Reporter | suse-beta@cboltz.de |
QA Contact | qa-bugs@suse.de |
Found By | --- |
Blocker | --- |
M17N:l10n.opensuse.org/l10n_opensuse_org-installer contains AppArmor profiles with syntax errors. usr.lib.git.git has #include <abstractions/ssl> which doesn't exist. My guess is that this should be one of #include <abstractions/ssl_certs> or #include <abstractions/openssl> I have no idea which one you need - if in doubt, remove the invalid line, reload the profile and wait for log events. Note that you'll need to apply this fix twice - once in the main profile, once in the ssh child profile. var.lib.weblate.ssh.ssh-weblate-wrapper needs the same fix (once). usr.share.weblate.manage.py has deny "#include <abstractions/consoles>" rw, which is an invalid rule. Please delete it. If this line was added with aa-logprof or aa-genprof (I don't hope so), a bugreport with the reproducer would be welcome. On a general note - once you are sure the profiles cover everything you need, please switch them to enforce mode.